Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e36342e302f32302d3230203d3e203135323336.roa
File:                     3134382e3231332e36342e302f32302d3230203d3e203135323336.roa (raw, json)
Hash identifier:          TcJZAbM4btP5GSIx7NFbuul51P+yKWeepLAwnBFhQCA=
Subject key identifier:   7D:FE:54:84:5A:19:11:60:CC:7C:0A:B7:CE:11:15:53:14:5C:F1:7B
Certificate issuer:       /CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
Certificate serial:       539CF8CB7FEBD57C019EDF69AEFDB5F387C5F279
Authority key identifier: 8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e36342e302f32302d3230203d3e203135323336.roa
Signing time:             Tue 05 Mar 2024 18:17:52 +0000
ROA not before:           Tue 05 Mar 2024 18:12:52 +0000
ROA not after:            Tue 04 Mar 2025 18:17:52 +0000
asID:                     15236
IP address blocks:        148.213.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl
                          rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 22 Sep 2024 08:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9c:f8:cb:7f:eb:d5:7c:01:9e:df:69:ae:fd:b5:f3:87:c5:f2:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89
        Validity
            Not Before: Mar  5 18:12:52 2024 GMT
            Not After : Mar  4 18:17:52 2025 GMT
        Subject: CN=7DFE54845A191160CC7C0AB7CE111553145CF17B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:21:f1:8e:f6:a3:00:d9:c9:48:cd:44:f6:08:
                    16:47:8c:cc:8a:fd:4d:e8:50:e9:a9:df:7a:b6:28:
                    d1:84:17:0b:1d:bf:ef:01:36:fc:d5:ad:58:2b:46:
                    99:8a:d2:15:c1:21:76:e8:bc:ba:31:50:80:1b:03:
                    9f:44:f5:fa:1e:47:e3:96:44:a2:60:3f:80:1c:6c:
                    56:be:4e:4a:54:9d:29:19:28:bf:98:8b:e8:aa:41:
                    1f:19:d2:4f:ee:a7:b6:28:44:b4:12:a9:84:4c:fd:
                    3b:d7:b1:41:70:6c:56:51:f9:7f:56:cd:e7:6c:51:
                    67:97:7c:27:d3:88:30:e8:ce:84:a6:36:07:9e:5e:
                    64:59:0f:14:23:7e:d9:c2:5b:69:a1:99:4d:81:32:
                    88:8a:95:15:a8:f9:ad:d4:94:b4:d8:93:31:98:58:
                    ff:3d:be:68:7f:f1:e3:57:61:29:0a:22:af:bb:8b:
                    a7:18:12:51:01:56:5f:af:2c:8c:f7:e3:8b:b0:ce:
                    9d:01:53:17:9f:d1:fd:ce:25:c2:e6:29:09:3c:ee:
                    9b:a7:10:70:fa:2e:6a:ab:41:9e:57:22:1d:12:ee:
                    44:a4:ee:fe:2e:78:38:fe:0c:c9:97:ca:a3:4c:bd:
                    b4:bf:f9:00:c4:4b:46:d2:64:c2:93:36:9d:82:b4:
                    a6:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FE:54:84:5A:19:11:60:CC:7C:0A:B7:CE:11:15:53:14:5C:F1:7B
            X509v3 Authority Key Identifier:
                keyid:8F:ED:CC:EF:4A:56:BC:01:B9:1F:F3:CD:E8:84:01:CC:6F:AE:DA:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8FEDCCEF4A56BC01B91FF3CDE88401CC6FAEDA89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/6DC0BA0077798E66B34D8EB5770883BB0362200C80B60219BEB1731BF09A351A/0/3134382e3231332e36342e302f32302d3230203d3e203135323336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.213.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         49:fb:00:9c:4f:0e:ae:6e:d4:fd:ab:54:9e:c6:fa:0f:7d:0a:
         38:dc:db:19:5a:18:35:3e:eb:af:19:d9:45:16:05:47:0f:36:
         7f:15:fe:93:36:8b:9a:4d:8e:08:7b:74:36:04:43:76:24:e0:
         ef:b7:2d:2c:ff:c5:f3:c0:d3:07:25:2b:a7:bf:f7:36:d6:ed:
         a4:5d:10:88:70:2b:df:04:8f:3f:64:11:78:ee:87:cf:de:68:
         7d:32:b5:7f:57:0c:b7:01:e8:7c:1a:45:00:0c:9e:a7:57:40:
         d3:0d:f0:0b:e1:a8:0c:b3:05:03:a0:f4:79:8d:98:27:85:2f:
         4b:00:62:ce:1a:dc:67:8d:cc:75:bd:73:ea:fb:2d:8d:eb:57:
         90:83:c5:9e:61:5a:45:2a:46:d9:51:04:62:81:48:1d:5b:5e:
         f5:a8:aa:76:10:db:2d:8b:a9:9e:22:9f:8c:96:b8:72:40:b0:
         ee:bf:9c:3d:3d:6e:16:c3:51:d9:14:fa:fb:b8:ef:95:b8:0d:
         ea:f9:64:b4:3c:77:b4:9f:76:dc:0e:5e:42:db:10:aa:fd:8e:
         c1:6b:09:f0:24:7e:ef:f3:7c:92:98:fc:28:ee:7a:11:0b:db:
         89:93:08:2d:be:7f:8c:64:64:30:d3:52:e3:e7:5b:92:75:05:
         52:5c:b8:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 00:05:56 2024 by rpki-client on console-fra.rpki-client.org